denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Merge branch 'ike-dscp'

Browse Source
This commit is contained in:
Martin Willi
2013-02-14 17:11:35 +01:00
parent 285668b6e3 88f4cd3988
commit e212033ef2
27 changed files with 242 additions and 68 deletions
Download Patch File Download Diff File Expand all files Collapse all files
man/ipsec.conf.5.in
+5
View File
@@ -452,6 +452,11 @@ suites, the strict flag
exclamation mark) can be used, e.g:
.BR aes256-sha512-modp4096!
.TP
.BR ikedscp " = " 000000 " | <DSCP field>"
Differentiated Services Field Codepoint to set on outgoing IKE packets sent
from this connection. The value is a six digit binary encoded string defining
the Codepoint to set, as defined in RFC 2474.
.TP
.BR ikelifetime " = " 3h " | <time>"
how long the keying channel of a connection (ISAKMP or IKE SA)
should last before being renegotiated. Also see EXPIRY/REKEY below.